For a system that uses user-defined usernames, when the username they first try is taken, then what would be an alternative to sequential usernames suggested to the user by the app? Just keep making the user try different usernames until they find one that isn't taken? Suggest a username to them that is not sequentially based on what they first tried?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1688/705#705